qlogicagent 2.20.1 → 2.20.3

package/dist/types/orchestration/workflow/semantic-acceptance.d.ts

@@ -0,0 +1,65 @@
+import type { CapabilityEntry } from "./capability-catalog.js";
+import type { WorkflowDef } from "./node-schema.js";
+import type { TriggerDef } from "./workflow-patch.js";
+import type { WorkflowIntentContract } from "./workflow-intent-contract.js";
+export type WorkflowSemanticCheck = {
+    type: "trigger_type";
+    triggerType: TriggerDef["type"];
+} | {
+    type: "capability_present";
+    capabilityId: string;
+    minCount?: number;
+} | {
+    type: "node_kind_count";
+    kind: string;
+    min?: number;
+    max?: number;
+} | {
+    type: "path";
+    from: string;
+    to: string;
+    ordered?: string[];
+} | {
+    type: "terminal_kind";
+    kind: string;
+} | {
+    type: "param_equals";
+    node: string;
+    field: string;
+    value: unknown;
+};
+export interface WorkflowSemanticCriterion {
+    id: string;
+    description: string;
+    check: WorkflowSemanticCheck;
+    /** Optional evidence link; it does not turn an intent fact into a completion gate. */
+    intentFactId?: string;
+}
+export interface WorkflowSemanticAcceptance {
+    status: "passed" | "needs_attention";
+    passed: number;
+    total: number;
+    criteria: Array<{
+        id: string;
+        description: string;
+        status: "passed" | "failed" | "unverified";
+        evidence: string;
+        intentFactId?: string;
+    }>;
+    /** Active conversational intent facts and whether a deterministic criterion supplied evidence. */
+    intentCoverage: Array<{
+        factId: string;
+        statement: string;
+        status: "verified" | "failed" | "unverified";
+        evidence: string;
+    }>;
+}
+/** Flow-level semantic checks are evidence, not a save/finish hard gate. */
+export declare function assessWorkflowSemantics(input: {
+    def: WorkflowDef;
+    trigger?: TriggerDef | null;
+    criteria?: WorkflowSemanticCriterion[];
+    catalog?: CapabilityEntry[];
+    aliases?: Record<string, string>;
+    intentContract?: WorkflowIntentContract;
+}): WorkflowSemanticAcceptance;

package/dist/types/orchestration/workflow/workflow-authoring.d.ts

@@ -0,0 +1,74 @@
+import type { CapabilityEntry } from "./capability-catalog.js";
+import type { WorkflowDef } from "./node-schema.js";
+import type { TriggerDef, WorkflowPatch } from "./workflow-patch.js";
+export type WorkflowAuthoringOperation = {
+    op: "add";
+    key: string;
+    capabilityId: string;
+    name?: string;
+    params?: Record<string, unknown>;
+} | {
+    op: "insert_after";
+    after: string;
+    key: string;
+    capabilityId: string;
+    name?: string;
+    params?: Record<string, unknown>;
+} | {
+    op: "replace_capability";
+    nodeId: string;
+    capabilityId: string;
+    name?: string;
+    params?: Record<string, unknown>;
+} | {
+    op: "update";
+    nodeId: string;
+    params: Record<string, unknown>;
+} | {
+    op: "rename";
+    nodeId: string;
+    name: string;
+} | {
+    op: "remove";
+    nodeId: string;
+} | {
+    op: "connect";
+    from: string;
+    to: string;
+    fromPort?: string;
+    toPort?: string;
+} | {
+    op: "connect_path";
+    nodes: string[];
+} | {
+    op: "disconnect";
+    from: string;
+    to: string;
+    fromPort?: string;
+} | {
+    op: "set_trigger";
+    trigger: TriggerDef;
+} | {
+    op: "set_node_options";
+    nodeId: string;
+    retry?: {
+        maxTries: number;
+        backoffMs?: number;
+    } | null;
+    timeoutMs?: number | null;
+    onError?: "stop" | "continue" | "errorPort" | null;
+};
+export interface CompiledWorkflowOperations {
+    patch: WorkflowPatch[];
+    aliasToNodeId: Record<string, string>;
+}
+/**
+ * Compile the Agent's bounded authoring operations into the canonical WorkflowPatch protocol.
+ * Node kinds, capability references, parameter templates and collision-free ids are Host/catalog
+ * derived rather than freehand graph JSON.
+ */
+export declare function compileWorkflowOperations(input: {
+    operations: WorkflowAuthoringOperation[];
+    current: WorkflowDef;
+    catalog: CapabilityEntry[];
+}): CompiledWorkflowOperations;

package/dist/types/orchestration/workflow/workflow-bundle.d.ts

@@ -6,6 +6,7 @@
 import { type WorkflowDef } from "./node-schema.js";
 import type { TriggerDef } from "./workflow-trigger.js";
 import type { ConcurrencyPolicy, WorkflowRecord } from "./workflow-store.js";
+import { type WorkflowTemplateSetupManifest } from "./workflow-template-setup.js";
 export declare const WORKFLOW_BUNDLE_SCHEMA_VERSION = 3;
 export interface CapabilityRequirement {
     category: "agent" | "mcp" | "memory" | "channel";
@@ -24,6 +25,8 @@ export interface WorkflowBundle {
     trigger?: TriggerDef;
     concurrency?: ConcurrencyPolicy;
     requires: CapabilityRequirement[];
+    /** Optional centralized setup form. Values and credentials are never serialized. */
+    setup?: WorkflowTemplateSetupManifest;
     meta?: {
         author?: string;
         tags?: string[];
@@ -42,6 +45,7 @@ export interface ParsedBundle {
     trigger?: TriggerDef;
     concurrency?: ConcurrencyPolicy;
     requires: CapabilityRequirement[];
+    setup?: WorkflowTemplateSetupManifest;
 }
 /** Parse and validate an incoming canonical bundle. */
 export declare function fromWorkflowBundle(payload: unknown): ParsedBundle;

package/dist/types/orchestration/workflow/workflow-controller.d.ts

@@ -25,6 +25,7 @@ import type { WorkflowDef } from "./node-schema.js";
 import { type PatchEnvelope, type WorkflowPatch } from "./workflow-patch.js";
 import { type RenderOptions } from "./workflow-render.js";
 import { WorkflowStore, type ConcurrencyPolicy, type WorkflowRecord } from "./workflow-store.js";
+import { type WorkflowTemplateSetupManifest, type WorkflowTemplateSetupState } from "./workflow-template-setup.js";
 import { type WorkflowRunHistoryStore } from "./run-history-store.js";
 export interface TriggerEvent {
     type: WorkflowTriggerKind;
@@ -78,6 +79,8 @@ export interface CreateInput {
     active?: boolean;
     /** Owning user (D38); the handler stamps resolveActiveOwnerUserId(). */
     owner?: string;
+    setup?: WorkflowTemplateSetupManifest;
+    setupState?: WorkflowTemplateSetupState;
 }
 /** Result of a `patch()` call (spec §C `WorkflowToolResult`). */
 export type PatchOutcome = {
@@ -105,7 +108,14 @@ export declare class WorkflowController {
      *  trigger path — manual RPC, cron scheduler, IM, webhook — is captured alike. */
     runHistory?: WorkflowRunHistoryStore | undefined);
     create(input: CreateInput): Promise<WorkflowRecord>;
-    update(id: string, patch: Partial<Pick<WorkflowRecord, "name" | "def" | "concurrency" | "active" | "permissionScope">>): Promise<WorkflowRecord>;
+    update(id: string, patch: Partial<Pick<WorkflowRecord, "name" | "def" | "concurrency" | "active" | "permissionScope" | "setup" | "setupState">>): Promise<WorkflowRecord>;
+    /** Apply all template answers to their node/trigger bindings in one CAS-protected revision. */
+    configureTemplate(id: string, input: {
+        baseRev: number;
+        values: Record<string, unknown>;
+    }): Promise<PatchOutcome & {
+        missingRequired?: string[];
+    }>;
     setActive(id: string, active: boolean): Promise<WorkflowRecord>;
     /**
      * Publish (D31): snapshot the current draft (`def`) as the version triggers execute.
@@ -122,9 +132,9 @@ export declare class WorkflowController {
      */
     revertTo(id: string, rev: number): Promise<WorkflowRecord>;
     /**
-     * Import an n8n workflow JSON (read-format only, plan M5 §2.1) into the single store. Converts
-     * via the deterministic translator then routes through `create`, so the graph passes the same
-     * `validateWorkflowDef` gate every write path uses — fail-loud on unsupported nodes or bad graph.
+     * Import an n8n workflow JSON into the single store. Native mappings stay native; compatible
+     * installed ecosystem nodes are resolved by the Host, while unsupported nodes remain explicit
+     * fail-loud placeholders. Every graph still passes the same canonical write validation.
      */
     importN8n(id: string, json: string | unknown, opts?: {
         concurrency?: ConcurrencyPolicy;
@@ -156,6 +166,8 @@ export declare class WorkflowController {
     run(id: string, trigger?: TriggerEvent, opts?: {
         recordHistory?: boolean;
         reuseCache?: boolean;
+        /** Host-only crash recovery: preserve the original run identity and history row. */
+        recoverRunId?: string;
         onStarted?: (run: WorkflowRunStarted) => void | Promise<void>;
     }): Promise<RunOutcome>;
     /**

package/dist/types/orchestration/workflow/workflow-edit-context.d.ts

@@ -0,0 +1,46 @@
+import type { CapabilityEntry } from "./capability-catalog.js";
+import type { WorkflowDef, WorkflowNodeDef } from "./node-schema.js";
+import type { TriggerDef } from "./workflow-patch.js";
+export interface WorkflowEditContextCapsule {
+    workflowId: string;
+    trigger?: TriggerDef | null;
+    selectedNodeIds: string[];
+    nodes: WorkflowNodeDef[];
+    edges: WorkflowDef["edges"];
+    omittedNodeCount: number;
+    lineage: Record<string, {
+        upstream: Array<{
+            nodeId: string;
+            name?: string;
+            fields: string[];
+            expressionExamples: string[];
+        }>;
+    }>;
+    latestRun?: {
+        status: string;
+        failedNodeId?: string;
+        error?: string;
+        nodeEvidence: Array<{
+            nodeId: string;
+            preview?: string;
+            error?: string;
+        }>;
+    };
+}
+export interface WorkflowRunEvidence {
+    status: string;
+    failedNodeId?: string;
+    error?: string;
+    nodes?: Record<string, {
+        preview?: string;
+        error?: string;
+    }>;
+}
+export declare function buildWorkflowEditContextCapsule(input: {
+    def: WorkflowDef;
+    trigger?: TriggerDef | null;
+    scope?: string[];
+    catalog?: CapabilityEntry[];
+    latestRun?: WorkflowRunEvidence;
+    maxNodes?: number;
+}): WorkflowEditContextCapsule;

package/dist/types/orchestration/workflow/workflow-intent-contract.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Conversation-owned Workflow intent ledger.
+ *
+ * Deliberately not an acceptance gate: it has no ready/complete/pass field and is never consulted
+ * to decide whether a proposal may be saved or whether an Agent turn may finish. It preserves
+ * exact user observations plus a revisable interpretation so incomplete conversations work.
+ */
+export interface WorkflowIntentObservation {
+    id: string;
+    sequence: number;
+    text: string;
+}
+export interface WorkflowIntentFact {
+    id: string;
+    statement: string;
+    confidence: "explicit" | "inferred";
+    sourceObservationIds: string[];
+    status: "active" | "superseded";
+}
+export interface WorkflowIntentQuestion {
+    id: string;
+    question: string;
+    sourceObservationIds: string[];
+    status: "open" | "resolved";
+}
+export interface WorkflowIntentContract {
+    revision: number;
+    observations: WorkflowIntentObservation[];
+    facts: WorkflowIntentFact[];
+    openQuestions: WorkflowIntentQuestion[];
+    diagnostics: string[];
+}
+export interface WorkflowIntentDelta {
+    upsertFacts?: Array<{
+        id: string;
+        statement: string;
+        confidence: "explicit" | "inferred";
+        sourceObservationIds: string[];
+    }>;
+    supersedeFactIds?: string[];
+    upsertQuestions?: Array<{
+        id: string;
+        question: string;
+        sourceObservationIds: string[];
+    }>;
+    resolveQuestionIds?: string[];
+}
+export declare function evolveWorkflowIntentContract(input: {
+    previous: WorkflowIntentContract | null | undefined;
+    newTurns: Array<{
+        sequence: number;
+        role: "user" | "assistant";
+        content: string;
+    }>;
+    delta?: WorkflowIntentDelta | null;
+}): WorkflowIntentContract;

package/dist/types/orchestration/workflow/workflow-patch.d.ts

@@ -91,6 +91,13 @@ export interface PatchEnvelope {
 export interface ApplyResult {
     target: PatchTarget;
     applied: WorkflowPatch[];
+    /** Non-blocking facts about pre-existing defects outside a scoped edit. */
+    diagnostics: WorkflowPatchDiagnostic[];
+}
+export interface WorkflowPatchDiagnostic {
+    classification: "preexisting";
+    nodeId: string;
+    message: string;
 }
 /** Thrown when a patch is rejected. `errors` is the ordered list of reasons (for self-correction). */
 export declare class PatchError extends Error {

package/dist/types/orchestration/workflow/workflow-runtime.d.ts

@@ -82,6 +82,8 @@ export interface WorkflowRuntimeOptions {
     trigger?: Record<string, unknown>;
     /** This run's trigger KIND (manual/schedule/…) — exposed on ExecutorContext for IT-7b audits. */
     triggerKind?: string;
+    /** Durable run identity exposed to Host-backed node executors. */
+    runId?: string;
     log?: {
         info(m: string): void;
         warn(m: string): void;
@@ -108,6 +110,7 @@ export declare class WorkflowRuntime {
     private readonly now;
     private readonly trigger?;
     private readonly triggerKind?;
+    private readonly runId?;
     private readonly log?;
     private readonly host?;
     private readonly abortController?;
@@ -115,6 +118,8 @@ export declare class WorkflowRuntime {
     private readonly checkpoint?;
     private readonly preserveCheckpoint;
     private readonly onNodeStatus?;
+    /** Serializes snapshots so an older slow write cannot land after a newer parallel-node write. */
+    private checkpointWriteChain;
     private dag;
     private readonly nodeDefs;
     private readonly nodeOutputs;

package/dist/types/orchestration/workflow/workflow-scheduler.d.ts

@@ -28,6 +28,13 @@ export declare const systemClock: SchedulerClock;
 export interface SchedulerDeps {
     controller: WorkflowController;
     clock?: SchedulerClock;
+    /**
+     * Product-level timezone for legacy schedule records that predate an explicit timezone.
+     * The reusable engine remains UTC by default; desktop hosts should pass the user's system zone.
+     */
+    defaultTimezone?: string;
+    /** Latest durable scheduled-run start, used to detect one missed slot after a cold restart. */
+    getLastScheduledAt?: (workflowId: string) => Promise<number | undefined>;
     /**
      * Surfaces an error from a timer-driven (cron) run, which has no caller to throw back to.
      * Required so a failed unattended run is never silently swallowed (§1.5 fail-loud). Caller-driven
@@ -48,6 +55,8 @@ export interface SchedulerDeps {
     onTriggerDropped?: (workflowId: string, triggerType: string, detail: {
         sinceLastMs: number;
         minIntervalMs: number;
+        reason?: "rate-limit" | "misfire";
+        scheduledAt?: number;
     }) => void;
 }
 export declare class WorkflowScheduler {
@@ -57,6 +66,8 @@ export declare class WorkflowScheduler {
     private readonly onRunStarted?;
     private readonly onRunCompleted?;
     private readonly onRunFailed?;
+    private readonly defaultTimezone;
+    private readonly getLastScheduledAt?;
     /** Every registered workflow's trigger, keyed by id (the single source for lookups). */
     private readonly triggers;
     /** Active cron arms keyed by workflow id. */

package/dist/types/orchestration/workflow/workflow-store.d.ts

@@ -9,6 +9,7 @@
  */
 import type { WorkflowDef } from "./node-schema.js";
 import type { TriggerDef } from "./workflow-patch.js";
+import type { WorkflowTemplateSetupManifest, WorkflowTemplateSetupState } from "./workflow-template-setup.js";
 /** What to do when a workflow is triggered while a previous run is still in-flight (spec §B5). */
 export type ConcurrencyPolicy = "queue" | "skip" | "parallel";
 export interface WorkflowRecord {
@@ -22,6 +23,10 @@ export interface WorkflowRecord {
     concurrency: ConcurrencyPolicy;
     /** The workflow's trigger (set via a WorkflowPatch set_trigger op; spec §C/D7). */
     trigger?: TriggerDef | null;
+    /** Portable, credential-free inputs shown in the import/template setup panel. */
+    setup?: WorkflowTemplateSetupManifest;
+    /** Non-secret answers and opaque connection references applied from `setup`. */
+    setupState?: WorkflowTemplateSetupState;
     /**
      * Unattended-run capability grant (spec D30, IT-7): sensitive node kinds this workflow may
      * execute under unattended triggers (schedule/im/webhook). Granted explicitly by the owner

package/dist/types/orchestration/workflow/workflow-template-setup.d.ts

@@ -0,0 +1,65 @@
+import type { WorkflowDef } from "./node-schema.js";
+import type { TriggerDef } from "./workflow-trigger.js";
+export type WorkflowTemplateSetupValue = string | number | boolean;
+export interface WorkflowTemplateSetupOption {
+    label: string;
+    value: string;
+}
+export interface WorkflowTemplateSetupField {
+    id: string;
+    label: string;
+    description?: string;
+    group?: string;
+    type: "text" | "textarea" | "url" | "number" | "boolean" | "select" | "connection";
+    required?: boolean;
+    placeholder?: string;
+    defaultValue?: WorkflowTemplateSetupValue;
+    options?: WorkflowTemplateSetupOption[];
+    /** Capability/provider family used to filter installed connections. */
+    connectionType?: string;
+}
+export interface WorkflowTemplateSetupBinding {
+    fieldId: string;
+    target: {
+        kind: "node";
+        nodeId: string;
+        path: string;
+    } | {
+        kind: "trigger";
+        path: string;
+    };
+}
+export interface WorkflowTemplateSetupManifest {
+    version: 1;
+    title?: string;
+    description?: string;
+    fields: WorkflowTemplateSetupField[];
+    bindings: WorkflowTemplateSetupBinding[];
+}
+export interface WorkflowTemplateSetupState {
+    values: Record<string, WorkflowTemplateSetupValue>;
+    updatedAt?: string;
+    completedAt?: string;
+}
+export interface WorkflowTemplateSetupProjection {
+    manifest: WorkflowTemplateSetupManifest;
+    values: Record<string, WorkflowTemplateSetupValue>;
+    status: "pending" | "complete";
+    missingRequired: string[];
+}
+export declare function validateWorkflowTemplateSetup(value: unknown, def: WorkflowDef): WorkflowTemplateSetupManifest;
+export declare function projectWorkflowTemplateSetup(manifest: WorkflowTemplateSetupManifest, state?: WorkflowTemplateSetupState): WorkflowTemplateSetupProjection;
+export declare function applyWorkflowTemplateSetup(definition: WorkflowDef, trigger: TriggerDef | null | undefined, manifest: WorkflowTemplateSetupManifest, previous: WorkflowTemplateSetupState | undefined, input: Record<string, unknown>, now?: string): {
+    def: WorkflowDef;
+    trigger?: TriggerDef | null;
+    state: WorkflowTemplateSetupState;
+    missingRequired: string[];
+};
+/**
+ * Reset every setup-bound destination before a workflow leaves the local Host.
+ * The manifest travels with the bundle; user answers and opaque connection ids do not.
+ */
+export declare function resetWorkflowTemplateSetupBindings(definition: WorkflowDef, trigger: TriggerDef | null | undefined, manifest: WorkflowTemplateSetupManifest): {
+    def: WorkflowDef;
+    trigger?: TriggerDef | null;
+};

package/dist/types/orchestration/workflow/workflow-trigger.d.ts

@@ -4,6 +4,10 @@ export type TriggerDef = {
 } | {
     type: "schedule";
     cron: string;
+    /** IANA timezone used to interpret the cron wall clock. Missing legacy values remain UTC. */
+    timezone?: string;
+    /** Desktop sleep/wake behavior. A late timer never replays every missed slot. */
+    misfirePolicy?: "run-once" | "skip";
 } | {
     type: "im-message";
     channel: string;

package/dist/types/orchestration/workflow-chat-builder.d.ts

@@ -2,25 +2,89 @@
  * Workflow Chat Builder (M4) — 自动化页"意图先行"的对话搭图/改图(D18/D17)。
  *
  * 与 solo-spec-builder.runSpecChatRound 同构:进程内 runForkedAgent + 受限工具,纯推理产出,
- * 不直接落库。区别:产出的是 **工作流提案**——新建给完整 WorkflowDef,改已有给 WorkflowPatch[]。
- * 应用由调用方(前端经既有 workflow.create/patch RPC,触发 WS 回流画布)完成,故本轮无副作用、
- * 也无需访问引擎控制器。
+ * 不直接落库。Agent 只提交有界 authoring operations；确定性编译器根据 Host 能力目录生成
+ * WorkflowPatch[]、dry-run 并产生流程级验收证据。应用仍由 Runtime Host 原子完成。
  */
 import type { ForkedAgentRunnerFactory } from "../runtime/ports/agent-execution-contracts.js";
 import type { LLMTransport } from "../runtime/ports/index.js";
-import type { ToolDefinition, AgentLogger } from "../agent/types.js";
+import type { ChatMessage, ToolDefinition, AgentLogger } from "../agent/types.js";
+import { type WorkflowPatch } from "./workflow/workflow-patch.js";
 import { type CapabilityEntry } from "./workflow/capability-catalog.js";
-/** agent 通过此工具产出工作流提案:新建给 def,改已有给 patch。 */
+import { type WorkflowIntentContract } from "./workflow/workflow-intent-contract.js";
+import type { WorkflowEditContextCapsule } from "./workflow/workflow-edit-context.js";
+import { type WorkflowSemanticAcceptance } from "./workflow/semantic-acceptance.js";
+export interface WorkflowClarification {
+    /** Host-roundtrip id for deterministically resolving this open question after an answer. */
+    intentQuestionId?: string;
+    /** Stable semantic id supplied by the Agent when the question is not tied to one field. */
+    id?: string;
+    /** Why this choice is useful; transported for telemetry/context, never interpreted as a gate. */
+    purpose?: string;
+    /** Optional field target for __ASK__ replacement flows. */
+    nodeId?: string;
+    field?: string;
+    header: string;
+    question: string;
+    options?: Array<{
+        label: string;
+        description?: string;
+    }>;
+    multiSelect?: boolean;
+}
+export interface WorkflowChatContextCheckpoint {
+    protocolVersion: 1;
+    producer: "qlogicagent";
+    payload: {
+        messages: {
+            role: "user" | "assistant";
+            content: string;
+        }[];
+        intentContract?: WorkflowIntentContract;
+    };
+}
+export interface WorkflowChatContextInput {
+    checkpoint: WorkflowChatContextCheckpoint | null;
+    newTurns: Array<{
+        sequence: number;
+        role: "user" | "assistant";
+        content: string;
+    }>;
+}
+type WorkflowChatContextMessage = {
+    role: "user" | "assistant";
+    content: string;
+};
+export declare function buildWorkflowChatPromptContext(input: {
+    context?: WorkflowChatContextInput;
+    history?: {
+        role: "user" | "assistant";
+        content: string;
+    }[];
+    model: string;
+    budgetTokens?: number;
+}): {
+    promptMessages: ChatMessage[];
+    checkpointMessages: WorkflowChatContextMessage[];
+};
+/** Agent emits bounded authoring operations; the deterministic compiler owns graph JSON. */
 export declare const PROPOSE_WORKFLOW_TOOL_NAME = "propose_workflow";
 export declare const PROPOSE_WORKFLOW_TOOL_DEF: ToolDefinition;
-/** 单轮入参。history 含到本轮为止的完整对话(末条为用户最新消息)。currentWorkflow 为已有图的渲染文本(改图上下文)。
- *  v1 不带 ask_user(不反问;直接用默认搭,用户再说一句改),故澄清往返的网关路由也无需接。 */
+/** Structured clarification transport only. It does not decide whether asking is required. */
+export declare const REQUEST_WORKFLOW_INPUT_TOOL_NAME = "request_workflow_input";
+export declare const REQUEST_WORKFLOW_INPUT_TOOL_DEF: ToolDefinition;
+/** 单轮入参。Runtime Host 传 checkpoint + 新消息；history 只服务不写主对话的 ephemeral 局部编辑。
+ * currentWorkflow 为已有图的渲染文本(改图上下文)。 */
 export interface WorkflowChatDeps {
-    history: {
+    context?: WorkflowChatContextInput;
+    /** Answered clarification ids from the transport; resolves evidence only and never ends the task. */
+    resolvedClarificationIds?: string[];
+    history?: {
         role: "user" | "assistant";
         content: string;
     }[];
     currentWorkflow?: string;
+    /** Host-built bounded prompt context. The full graph remains private compiler input. */
+    editContext?: WorkflowEditContextCapsule;
     /** D19 框选局部修改:用户框选的节点 id;非空时指示 agent 只产出 scoped patch(引擎按同 scope 强制)。 */
     scope?: string[];
     /**
@@ -29,18 +93,32 @@ export interface WorkflowChatDeps {
      * 校验回环拒绝引用目录外能力(反幻觉)。缺省(无目录)时退回静态 kind 说明、不做 ref 校验。
      */
     catalog?: CapabilityEntry[];
+    /** Automation-only Host tools. Omitted entirely outside workflow configuration. */
+    connectorTools?: ToolDefinition[];
+    invokeConnectorTool?: (name: string, args: Record<string, unknown>) => Promise<unknown>;
     transport: LLMTransport;
     apiKey: string;
     model: string;
     createAgentRunner: ForkedAgentRunnerFactory;
     log: AgentLogger;
     parentSignal?: AbortSignal;
+    /** Test seam for deterministic forced compaction. Production uses the model-derived budget. */
+    contextBudgetTokens?: number;
 }
 export interface WorkflowChatResult {
     reply: string;
-    def?: Record<string, unknown>;
-    patch?: unknown[];
-    trigger?: Record<string, unknown>;
+    proposal?: {
+        patch: WorkflowPatch[];
+    };
+    /**
+     * A valid partial proposal can coexist with a later rejected refinement. The Host still applies
+     * the validated patch, while the UI receives the actual rejected diagnostics instead of an
+     * assistant success claim that describes nodes which never reached the candidate graph.
+     */
+    proposalWarnings?: {
+        attempts: number;
+        errors: string[];
+    };
     /**
      * Fail-loud(§3/EX-A):本轮 agent 调过 propose_workflow 但**没有任何一次通过校验**时带上
      * (attempts=被拒次数,errors=最后一次的校验错误)。reply 此时只是 agent 的口头方案,
@@ -51,17 +129,24 @@ export interface WorkflowChatResult {
         errors: string[];
     };
     /**
-     * AI-2: per-field {{ __ASK__ }} placeholders the agent left for genuinely-unknown REQUIRED values.
-     * The def IS applied (so the user sees the shape) but these nodes show a 待补 badge and the
-     * workflow cannot be activated until resolved. Absent/empty = nothing pending.
+     * Per-field __ASK__ placeholders for genuinely unknown required values. They remain revisable
+     * conversation state and never prevent already reliable parts of the proposal being applied.
      */
-    clarify?: {
-        nodeId: string;
-        field: string;
-        question: string;
-    }[];
+    clarify?: WorkflowClarification[];
+    /** Flow-level evidence for the accepted candidate. It informs the user; it is not a hard gate. */
+    semanticAcceptance?: WorkflowSemanticAcceptance;
+    /** Revisable conversational evidence only; never a save/finish gate. */
+    intentContract: WorkflowIntentContract;
+    /** IDs included in the initial compact working set; full catalog remains searchable. */
+    capabilitySelection?: string[];
+    /** Structured secure-input request returned by connector_request_connection. */
+    pendingConnectorInput?: Record<string, unknown>;
+    /** Most recent connector_validate evidence, surfaced without turning it into a finish gate. */
+    connectorValidation?: Record<string, unknown>;
+    contextCheckpoint: WorkflowChatContextCheckpoint;
 }
 /** agent 按需检索能力长尾(系统提示只放每类前 N 条)。 */
 export declare const LIST_CAPABILITIES_TOOL_NAME = "list_capabilities";
-/** 跑一轮对话式搭图/改图,返回自然语言 reply + 工作流提案(def 新建 / patch 改已有)。失败抛,由调用方降级。 */
+/** 跑一轮对话式搭图/改图,返回自然语言 reply + 编译后的工作流 patch。失败抛,由调用方降级。 */
 export declare function runWorkflowChatRound(deps: WorkflowChatDeps): Promise<WorkflowChatResult>;
+export {};

package/dist/types/orchestration/worktree-task-prompt.d.ts

@@ -0,0 +1 @@
+export declare function buildWorktreeTaskPrompt(worktreePath: string, prompt: string): string;